MacTech 04132021

MacTech Groups Agenda
Tue, Apr 13, 2021
2:30 to 4:30 pm
meet.google.com/aie-ypji-pqd 

Announcements – 5 min 

OIT only supports macOS 10.14.6 or newer
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
macOS versions that shipped with Intel Hardware: support.apple.com/kb/HT1159
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity Macintosh MultiUser Workflow uses NoLoAD configuration with local home directory at /Users/$uid$
OIT supports only Apple, Intel (i386) hardware for Mac OS and software. Only unmodified iOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request invitation by opening a help desk ticket at  help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf,  go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
JAMF Pro Cheat Sheet at go.ncsu.edu/jamfcheat for details on common configuration management tasks

Training – 5 min (any course available via Meet/Zoom upon request) 

OIT-Managing Apple Devices with Jamf Pro – TBA/Request
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro01-JPro01&deptName=OIT&instanceID=000006

OIT-Jamf Pro Best Practices for Packagers – TBA/Request
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro03-JPro03&deptName=OIT&instanceID=000005 

OIT-Advanced Apple Device  Management with Jamf Pro – TBA/Request
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro02-JPro02&deptName=OIT&instanceID=000005 

CrashPlan for Sub-Org Administrators – Request –  reporter.ncsu.edu/link/courseview?courseID=OIT-CPlan1-CPlan1&deptName=OIT 

Local Based Commercial Training – training.computertree.com/course/ 

JAMF Pro Training – www.jamf.com/training/ 

Service Updates – 30 min 

Configuration Management  – Jamf Pro production is 10.28.0, test on nccloudtest is 10.28.0, and the current beta is 10.29B2.  Jamf Pro is the only approved Configuration Management system for macOS, iOS/iPadOS, and tvOS.  See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/ 

Patch Definition Management –  Jamf has notified us that changes to patch titles are coming see https://docs.jamf.com/10.27.0/jamf-pro/release-notes/Deprecations_and_Removals.html.

Backup for Endpoints – No changeThe Code42  production service is at version 8.6.0 Existing clients are automatically updated from the cloud server.  For NEW installs only the package in JAMF is “NCSU-Campus-Install Code42-860.pkg”. The “NCSU-Campus-Install Code42CrashPlan License and Config.pkg” is required in the policy as before for new installs. 

Internet Recovery –  https://support.apple.com/en-us/HT204904.
Also see: https://mrmacintosh.com/restore-macos-firmware-on-an-apple-silicon-mac-boot-to-dfu-mode/
Apple Silicon devices running macOS are more like iPads now and have several recovery options including:
macOS Recovery
System Recovery – Will boot automatically if macOS Recovery is unavailable
macOS Big Sur USB Installer Drive – External boot for macOS Installers is enabled by default on ASi
Apple Configurator 2 REVIVE – reinstalls macOS Recovery retaining user data on the drive
Apple Configurator 2 RESTORE – reinstalls macOS Recovery, ERASES drive!! and reinstalls macOS

Software Packaging – No change.  Still having to fix update failures manually.  Most recipes have not been updated to pull installers for Universal versions yet.  Many recipes are still restricting installation on macOS 11.  If you encounter one of these file an issue with the recipe author.  

AntiMalware – No change.  DetectX Swift (intel) is still available and should be installed see oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/   

Sensitive Data Discovery – Use the Jamf Pro package NCSU-Campus-Uninstall_Spirion.pkg to remove both Spirion and older Identity Finder. Still have 1345 NCSU macOS devices that have updated inventory in the last 30 days with Spiron installed!!

Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.

AppleCare for Enterprise – Still on hold pending Apple being able to add to MarketPlace. 

Endpoint Protection Standard – Phase 2 deadline- Was Dec 31, 2020.
See Jamf Pro Cheat Sheet at:  go.ncsu.edu/jamfcheat  

— 

Jamf Pro Removing Old LDAP Connection – 5 min
Before we added the DUO MFA sign on requirement for Jamf Pro we had an older LDAP connection to our campus servers.  For the transition we simply changed our server setting to point to the new DUO enabled server which requires login with <unityid>@ncsu.edu.  After running several months with no unexpected issues we will be removing the old connection on Monday April 24, 2021.  No impact is expected. Discussion

Jamf Composer Big Sur Workaround – 5 min
We have confirmed a known issue with Jamf Composer and Big Sur via Jamf Support:  “while attempting to package software on Big Sur with Composer 10.27.0 and 10.28.0, packaging will fail with an error “Couldn’t communicate with a helper application”. Jamf support confirms this is a known issue and will be fixed with version 10.30.0.“(PI-009460)  In the meantime, the workaround is to use Jamf Composer version 10.26.x available  for nc.jamfcloud.com as  UNCWide-jamfpro10261.pkg Discussion.

Adobe update disaster continues – 5 min
OIT is still working to try and get working installers for Adobe 2021 products for both Intel and ARM64.  Photoshop has been released as Apple Silicon native and Indesign **installers only** have been updated so they will install with Rosetta2 unmodified.  New packages in Jamf soon. The other Adobe installers still fail on Apple Silicon even with Rosetta2.
Discussion.

Devices needing Spiron Removed – 5 min
Here is a list by Site of the number of devices that still have Spiron installed and have updated inventory in the last 30 days (as of 04122021).  See the full list by Site at https://docs.google.com/spreadsheets/d/1ukbty46sglCtJe-eQrdLKe2ixUOty0OvqXsHw5y1u3E/edit?usp=sharing

 Please remove Spirion with NCSU-Campus-Uninstall_Spirion.pkg and confirm!!

NCSU-ATH 1
NCSU-BME 4
NCSU-CALS 7
NCSU-CED 4
NCSU-CHASS 12
NCSU-CNR 5
NCSU-COE 25
NCSU-COE-CSC 66
NCSU-COE-ECE 2
NCSU-COE-ISE 7
NCSU-COE-MAE 1
NCSU-COE-SCI 1
NCSU-COS 222
NCSU-CVM 5
NCSU-DASA 9
NCSU-DELTA 1
NCSU-EIT 597
NCSU-FI 9
NCSU-LIB 271
NCSU-MCK 1
NCSU-OIT-MD 72
NCSU-PCOM 2
NCSU-SSCL 16
NCSU-TEX 3

 

Q&A – 15 min
You ask we try to answer 

Next meeting: 

MacTech – Tue. May 11, 2021  Virtual via Google Meet.
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.